, Kielbasiewicz, Peter wrote:
> I support >200 RnD Linux Boxes and maintain a local mechanism to
> monitor and update passwd and group files.
> So I needed to disable the test for group_accounts as changes to these
> files occur consolidated on all machines and I want to avoid daily
> warnin
I support >200 RnD Linux Boxes and maintain a local mechanism to monitor and
update passwd and group files.
So I needed to disable the test for group_accounts as changes to these files
occur consolidated on all machines and I want to avoid daily warnings from
every host on this as these are
: [Rkhunter-users] DISABE_TESTS=group_accounts still complains about
file property changes
On Tue, 2018-06-19 at 10:41 +, Kielbasiewicz, Peter wrote:
> Sorry for the confusion.
> I did copy the wrong statement in my last answer.
> Of course I had added the values shown below
> D
p_accounts still complains about
file property changes
On Mon, 2018-06-18 at 10:35 +, Kielbasiewicz, Peter wrote:
> I had tried this option before but it only works on USER files.
>
Not really. It is not possible to disable some commands, but /etc/passwd is
just a
5:24 +, Kielbasiewicz, Peter wrote:
> As I said, I had tried it before.
> I added
> USER_FILEPROP_FILES_DIRS="/etc/passwd"
> to rkhunter.conf.local but still got messages that the checksum of
> passwd had changed.
>
Yes, you will. That option says to monit
, Kielbasiewicz, Peter wrote:
> Sorry John,
> no change.
> Did YOU ever try it on your machine?
>
Yes. It worked fine.
You are running rkhunter version 1.4.6?
Can you leave the EXCLUDE_USER_FILEPROP_FILES_DIRS option in the config file
and make a change to the /etc/passwd file. Then r
